For those of you who need Internet-cafe style bandwidth management rules, ClearOS 6 is a good starting point. Both Squid and iptables support tproxy, so it should be possible to get things working by following this document: